• 1 (current)
  • 2
  • 3
Wednesday, 16.04.2025
02:00
SIEMENS CERT
SSA-832273 V1.8 (Last Update: 2025-04-16): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices
Title
SSA-832273 V1.8 (Last Update: 2025-04-16): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices
Published
April 16, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-832273.html
Summary
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or ...
02:00
SIEMENS CERT
SSA-443402 V1.0: Multiple SQL Injection Vulnerabilities in TeleControl Server Basic before V3.1.2.2
Title
SSA-443402 V1.0: Multiple SQL Injection Vulnerabilities in TeleControl Server Basic before V3.1.2.2
Published
April 16, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-443402.html
Summary
TeleControl Server Basic before V3.1.2.2 contains multiple SQL Injection vulnerabilities that could allow an attacker to read and write to the application’s DB, cause denial of service and execute code in an OS shell with limited “NT AUTHORITY” permissions. Siemens has conducted a root-cause analysis for potential SQL injection vulnerabilities ...
02:00
SIEMENS CERT
SSA-395348 V1.0: Improper Handling of Length Parameter Inconsistency Vulnerability in TeleControl Server Basic before V3.1.2.2
Title
SSA-395348 V1.0: Improper Handling of Length Parameter Inconsistency Vulnerability in TeleControl Server Basic before V3.1.2.2
Published
April 16, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-395348.html
Summary
TeleControl Server Basic before V3.1.2.2 contains a Improper Handling of Length Parameter Inconsistency Vulnerability that could allow an attacker to cause the application to allocate exhaustive amounts of memory and subsequently create a denial of service condition. Siemens has released a new version for TeleControl Server Basic and recommends to ...
02:00
SIEMENS CERT
SSA-366067 V1.2 (Last Update: 2025-04-16): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices
Title
SSA-366067 V1.2 (Last Update: 2025-04-16): Multiple Vulnerabilities in Fortigate NGFW on RUGGEDCOM APE1808 Devices
Published
April 16, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-366067.html
Summary
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens is preparing further fix versions and recommends specific countermeasures for products where fixes are not, or ...
Tuesday, 15.04.2025
14:00
US CERT (ICS)
Siemens Industrial Edge Device Kit
Title
Siemens Industrial Edge Device Kit
Published
April 15, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-02
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX
Title
Siemens SIMOCODE, SIMATIC, SIPLUS, SIDOOR, SIWAREX
Published
April 15, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-03
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
ABB M2M Gateway
Title
ABB M2M Gateway
Published
April 15, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-08
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 8.8 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: M2M Gateway Vulnerabilities: Integer Overflow or Wraparound, Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'), Unquoted Search Path or Element, Untrusted Search Path, Use After Free, Out-of-bounds Write, Buffer Copy without Checking Size of ...
14:00
US CERT (ICS)
Mitsubishi Electric Europe B.V. smartRTU
Title
Mitsubishi Electric Europe B.V. smartRTU
Published
April 15, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-09
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Mitsubishi Electric Europe B.V. Equipment: smartRTU Vulnerability: Missing Authentication for Critical Function, OS Command Injection 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow a remote unauthenticated attacker to disclose, tamper with, destroy or delete ...
14:00
US CERT (ICS)
Delta Electronics COMMGR
Title
Delta Electronics COMMGR
Published
April 15, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-07
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Delta Electronics Equipment: COMMGR Vulnerability: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG) 2. RISK EVALUATION Successful exploitation of this vulnerability could allow for an attacker to remotely access the AS3000Simulator family in the COMMGR software ...
14:00
US CERT (ICS)
Lantronix Xport
Title
Lantronix Xport
Published
April 15, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-05
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Lantronix Equipment: Xport Vulnerability: Missing Authentication for Critical Function 2. RISK EVALUATION Successful exploitation of this vulnerability could allow an attacker unauthorized access to the configuration interface and cause disruption to monitoring and operations. 3. TECHNICAL ...
14:00
US CERT (ICS)
Growatt Cloud Applications
Title
Growatt Cloud Applications
Published
April 15, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-105-04
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.3 ATTENTION: Exploitable remotely/low attack complexity Vendor: Growatt Equipment: Cloud Applications Vulnerabilities: Cross-site Scripting, Authorization Bypass Through User-Controlled Key, Insufficient Type Distinction, External Control of System or Configuration Setting 2. RISK EVALUATION Successful exploitation of these vulnerabilities could allow an attacker to compromise ...
Monday, 14.04.2025
02:00
SIEMENS CERT
SSA-874353 V1.2 (Last Update: 2025-04-14): Entity Enumeration Vulnerability in Mendix Runtime
Title
SSA-874353 V1.2 (Last Update: 2025-04-14): Entity Enumeration Vulnerability in Mendix Runtime
Published
April 14, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-874353.html
Summary
Mendix Runtime allows for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application. Siemens has released new versions for several affected products and recommends to update to the latest ...
Thursday, 10.04.2025
14:00
US CERT (ICS)
Siemens SIDIS Prime
Title
Siemens SIDIS Prime
Published
April 10, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-02
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens Industrial Edge Devices
Title
Siemens Industrial Edge Devices
Published
April 10, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-04
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens Insights Hub Private Cloud
Title
Siemens Insights Hub Private Cloud
Published
April 10, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-05
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens SENTRON 7KT PAC1260 Data Manager
Title
Siemens SENTRON 7KT PAC1260 Data Manager
Published
April 10, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-06
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
Siemens License Server
Title
Siemens License Server
Published
April 10, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-01
Summary
As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please see Siemens' ProductCERT Security Advisories (CERT Services | Services | Siemens Global). View CSAF 1. EXECUTIVE SUMMARY ...
14:00
US CERT (ICS)
ABB Arctic Wireless Gateways
Title
ABB Arctic Wireless Gateways
Published
April 10, 2025, 2 p.m.
URL
https://www.cisa.gov/news-events/ics-advisories/icsa-25-100-09
Summary
View CSAF 1. EXECUTIVE SUMMARY CVSS v4 9.2 ATTENTION: Exploitable remotely/low attack complexity Vendor: ABB Equipment: Arctic Wireless Gateways Vulnerabilities: Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Improper Privilege Management, Exposure of Sensitive Information to an Unauthorized Actor, Improper Limitation of a Pathname to a Restricted Directory ...
02:00
SIEMENS CERT
SSA-874353 V1.1 (Last Update: 2025-04-10): Entity Enumeration Vulnerability in Mendix Runtime
Title
SSA-874353 V1.1 (Last Update: 2025-04-10): Entity Enumeration Vulnerability in Mendix Runtime
Published
April 10, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-874353.html
Summary
Mendix Runtime allows for entity enumeration due to distinguishable responses in certain client actions. This could allow an unauthenticated remote attacker to list all valid entities and attribute names of a Mendix Runtime-based application. Siemens has released new versions for several affected products and recommends to update to the latest ...
Tuesday, 08.04.2025
02:00
SIEMENS CERT
SSA-634640 V1.0: Weak Authentication Vulnerability in Siemens Industrial Edge Devices
Title
SSA-634640 V1.0: Weak Authentication Vulnerability in Siemens Industrial Edge Devices
Published
April 8, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-634640.html
Summary
Siemens Industrial Edge Devices contain a weak authentication vulnerability that could facilitate an unauthenticated remote attacker to circumvent authentication and impersonate a legitimate user. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific ...
02:00
SIEMENS CERT
SSA-767615 V1.2 (Last Update: 2025-04-08): Information Disclosure Vulnerability in SIPROTEC 5 Devices
Title
SSA-767615 V1.2 (Last Update: 2025-04-08): Information Disclosure Vulnerability in SIPROTEC 5 Devices
Published
April 8, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-767615.html
Summary
An information disclosure vulnerability in SIPROTEC 5 devices could allow an unauthenticated, remote attacker to retrieve sensitive information of the device. Siemens has released new versions for several affected products and recommends to update to the latest versions. Siemens is preparing further fix versions and recommends specific countermeasures for products ...
02:00
SIEMENS CERT
SSA-698820 V1.6 (Last Update: 2025-04-08): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices
Title
SSA-698820 V1.6 (Last Update: 2025-04-08): Multiple Vulnerabilities in Fortigate NGFW Before V7.4.4 on RUGGEDCOM APE1808 Devices
Published
April 8, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-698820.html
Summary
Fortinet has published information on vulnerabilities in FORTIOS. This advisory lists the related Siemens Industrial products. Siemens has released a new version of Fortigate NGFW for RUGGEDCOM APE1808 and recommends to update to the latest version. Siemens recommends to consult and implement the workarounds provided in Fortinet’s upstream security notifications.
02:00
SIEMENS CERT
SSA-525431 V1.0: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3
Title
SSA-525431 V1.0: Privilege Escalation Vulnerabilities in Siemens License Server Before V4.3
Published
April 8, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-525431.html
Summary
Siemens License Server before V4.3 contains various vulnerabilities that could allow a low-privileged local user to escalate privileges or perform arbitrary code execution. Siemens has released a new version for Siemens License Server (SLS) and recommends to update to the latest version.
02:00
SIEMENS CERT
SSA-725549 V1.0: Denial of Service of ICMP in Industrial Devices
Title
SSA-725549 V1.0: Denial of Service of ICMP in Industrial Devices
Published
April 8, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-725549.html
Summary
A vulnerability exists in affected products that could allow remote attackers to affect the availability of the devices under certain conditions. The integrated ICMP services in the underlying TCP/IP stack is vulnerable to a denial of service attack through specially crafted ICMP packets. A successful attack will impact the availability ...
02:00
SIEMENS CERT
SSA-503939 V1.1 (Last Update: 2025-04-08): Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP
Title
SSA-503939 V1.1 (Last Update: 2025-04-08): Vulnerabilities in the BIOS of the SIMATIC S7-1500 TM MFP
Published
April 8, 2025, 2 a.m.
URL
https://cert-portal.siemens.com/productcert/html/ssa-503939.html
Summary
Multiple vulnerabilities have been identified in the BIOS of the SIMATIC S7-1500 TM MFP. Siemens is preparing fix versions and recommends specific countermeasures for products where fixes are not, or not yet available.
  • 1 (current)
  • 2
  • 3

Last Updates

BOSCH PSIRT
15.01.2025
SIEMENS CERT
16.04.2025
US CERT
01.04.2025
US CERT (ICS)
15.04.2025

By Source

Archive

2025
2024
2023
2022
2021
2020
2019
2018
2017

Feeds